Privacy Notice

Emotional Reset
Operated by Happy Monday SRL
București, Romania
Version 1.0
Effective date: 1 June 2026
Last updated: 1 June 2026

1. Introduction

Emotional Reset is a mobile application designed as a "soft-panic button" - a tool you can reach for in moments of acute stress, anxiety, sadness, or overwhelm. The app offers short grounding exercises, typically one minute long, and is built to be used briefly and infrequently, when you need it.

This Privacy Notice explains what information we collect when you use Emotional Reset, how we use it, who we share it with, how long we keep it, and the rights you have under European data protection law.

We have written this policy to be clear and direct. If anything is unclear, you can reach us at contact@emotionalreset.me and we will explain.

In one paragraph

We collect as little as possible. You do not need an account to use Emotional Reset. We do not know your name, your email, or your location beyond your country. The data we do collect is pseudonymous - tied to a device identifier, not to you personally. We never sell or rent data. We use a small number of trusted technical providers, listed openly in Section 6.

2. Who we are

Emotional Reset is operated by Happy Monday SRL, a company registered in Romania.

For the purposes of the EU General Data Protection Regulation (GDPR), Happy Monday SRL is the data controller. We are not required to appoint a Data Protection Officer (DPO) under Article 37 GDPR, but we take data protection seriously and you can contact us directly using the addresses above.

3. What information we collect

We have designed Emotional Reset to work without you needing to create an account or share personal details. Here is exactly what we collect, organised by where it comes from.

3.1 Information collected automatically when you use the app

When you open and use Emotional Reset, the app stores and processes the following information through our backend (Supabase):

• A pseudonymous device identifier (device_id) generated locally on your device. This is a random string of characters that lets us recognise your device across sessions. It is not linked to your name, email, phone number, or any directly identifying information.
• Your country, derived from your device's locale settings (for example, "RO", "UK", "US"). We do not collect GPS, IP-based location, or any more precise location data.
• Your device language.
• The version of the app you are using.
• The exercise categories you access (Anxiety, Sadness, Overwhelm, Universal, or Laughter).
• Session timestamps (when you started and finished an exercise).
• Session outcomes (whether you completed, skipped, or tried another exercise).
• If you skip an exercise, the reason you select.
• Thumbs up or thumbs down ratings you give after exercises.

We use this information to make the app work, to understand which exercises are useful, and to improve the product. It is processed on the basis of our legitimate interest in operating and improving the app (Article 6(1)(f) GDPR).

3.2 Information you send us when you contact us

Emotional Reset includes a "Contact us" option in Settings. When you tap it, your device opens a pre-filled email addressed to us at support@emotionalreset.me. This email automatically includes:

• The version of the app you are using.
• The build number of the app.
• Your device model (for example, "iPhone 15").
• Your operating system and its version (for example, "iOS 18.2").

This information helps us understand and resolve technical issues. It is included only when you actively choose to contact us - never collected silently in the background.

The email also contains a free-text area where you write your message. What you write there is entirely up to you. We recommend sharing only what is needed to describe your issue, and we suggest you avoid including sensitive personal information unless it is necessary for us to help you.

3.3 Information related to purchases

Emotional Reset offers a one-time premium purchase (€9.99) that unlocks the full library. We do not offer subscriptions. To process purchases, we use RevenueCat, which acts as a layer between us and the Apple App Store / Google Play Store.

The information processed in connection with your purchase includes:

• A pseudonymous app user identifier (different from the device_id used for in-app analytics).
• The transaction identifier issued by Apple App Store or Google Play.
• The amount paid and the currency.
• The time of the purchase.
• The country of the store where you made the purchase.
• Your premium status (whether your purchase is active).

We do not pass any information about your behaviour in the app (which exercises you do, which categories you access, how you feel) to RevenueCat. Purchase data and behavioural data are kept strictly separate.

The legal basis for this processing is the performance of the contract you enter into when you make a purchase (Article 6(1)(b) GDPR).

3.4 Crash and error diagnostics

To keep the app stable and to fix bugs, we use Sentry for crash and error reporting. When the app encounters an error, Sentry receives:

• A technical description of the error (stack trace).
• Your device model and operating system version.
• The version of the app.
• The time the error occurred.
• Breadcrumbs - a list of recent actions in the app - filtered specifically to exclude any reference to the exercise category you were using or to your emotional state.

All Sentry data is stored in the European Union (Frankfurt, Germany). The legal basis is our legitimate interest in maintaining a stable and secure application (Article 6(1)(f) GDPR).

3.5 Information collected by the app stores

When you download Emotional Reset from the Apple App Store or Google Play, Apple and Google may collect information about you according to their own privacy policies. We do not control this collection. We receive only aggregated reports about downloads, conversions, and sales - never information that identifies individual users.

You can read their privacy policies here:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy

3.6 What we DO NOT collect

For transparency, here are categories of data that Emotional Reset never collects:

• Your name, email address, phone number, or any other directly identifying contact information (unless you choose to send us an email).
• Precise location (GPS) or IP-based location data.
• Access to your photos, microphone, camera, contacts, calendar, or other apps on your device.
• Advertising identifiers (IDFA on iOS, AAID on Android).
• Cross-app or cross-site tracking data.
• Health data from Apple Health or Google Fit.
• Biometric data.
• Information about people other than you.

4. How we use this information

We use the information described above for the following purposes:

• To operate the app and deliver the exercises you select.
• To remember whether you have made a premium purchase, so you do not lose access on a new device.
• To understand how the app is used in the aggregate, and to decide which exercises and categories work well or need to be improved.
• To respond to questions, suggestions, and bug reports you send us.
• To detect and fix technical errors that affect the app's stability.
• To comply with legal obligations, in particular our obligation to keep transaction records for tax purposes (seven years under Romanian fiscal law).

We do not use your information to build profiles, to make automated decisions that affect you legally, or to target you with advertising. Emotional Reset shows no advertising of any kind.

5. Legal basis for processing

Under the GDPR, every processing activity must have a legal basis. The bases we rely on are summarised below:

App operation and product analytics

• App operation - Performance of a contract (Article 6(1)(b) GDPR) - delivering the app functionality you use.
• Product analytics - Legitimate interest (Article 6(1)(f) GDPR) - analysing aggregated usage to improve the product.

Processing your purchase
Performance of a contract (Article 6(1)(b) GDPR) - delivering the premium content you purchased.

Crash and error diagnostics
Legitimate interest (Article 6(1)(b) GDPR) - ensuring the app remains stable and secure.

Responding to your support requests
Legitimate interest (Article 6(1)(b) GDPR) - providing support. Where you voluntarily include information about your wellbeing in a message, your explicit consent (Article 9(2)(a) GDPR) for that specific information.

Receiving voluntary feedback
Your consent (Article 6(1)(f) GDPR), given by sending us feedback.

Keeping transaction records for tax purposes
Compliance with a legal obligation (Article 6(1)(c) GDPR) under Romanian fiscal law.

6. Who we share information with

We do not sell or rent your information. We share it only with a small number of trusted technical providers (processors) who help us operate the app. Each of them is bound by a Data Processing Agreement (DPA) that requires them to handle your data according to GDPR standards.

We may also share information when we are legally required to do so - for example, in response to a valid request from a competent authority. We will challenge any request that we believe is excessive or unlawful, and we will inform you to the extent permitted by law.

7. How long we keep your information

We keep your information only as long as we need it. The retention periods below apply to each type of data:

Once a retention period ends, the relevant data is deleted automatically. If you ask us to delete your data earlier, we will do so (see Section 9), subject to legal obligations that may require us to keep certain records (for example, purchase records for tax purposes).

8. Your rights

Under the GDPR, you have a number of rights regarding your personal data. These rights apply free of charge and we will respond to any request within 30 days, as required by Article 12(3) GDPR.

8.1 The rights you have

• Right of access (Article 15) - you can ask for a copy of the data we hold about you.
• Right to rectification (Article 16) - you can ask us to correct data that is inaccurate.
• Right to erasure / "right to be forgotten" (Article 17) - you can ask us to delete your data. See Section 9.3 for how to do this directly from the app.
• Right to restriction of processing (Article 18) - you can ask us to pause processing in certain circumstances.
• Right to data portability (Article 20) - you can ask for your data in a structured, machine-readable format (we provide JSON).
• Right to object (Article 21) - you can object to processing based on our legitimate interests.
• Right to lodge a complaint with a supervisory authority - see Section 14.

8.2 How to exercise your rights

To exercise any of these rights, send an email to support@emotionalreset.me. Please describe what you are asking for as clearly as you can. Because we do not hold your name or email by default, please include in your message the device_id of the device you use the app on (you can find this in Settings → About). Without this, we may not be able to locate your data.

We will not refuse a request on grounds of cost or inconvenience. We may, however, ask for reasonable additional information to verify your identity, where this is necessary to protect your data from being released to the wrong person.

8.3 Deleting your data directly from the app

You do not need to email us to delete your data. Inside the app, go to Settings → Delete my data. This will permanently delete all data associated with your device from our backend, including your session history, analytics, and feedback. Your purchase records are kept for the period required by Romanian tax law (see Section 8) but are no longer linked to identifiable behavioural data after deletion.

Deletion is final and cannot be undone.

9. A note on the sensitive context of this app

Emotional Reset is used in moments that may relate to your mental wellbeing. We take this seriously, and we want to be transparent about how we handle this.

We do not collect information that identifies your mental or physical health in the legal sense of Article 9 GDPR. The category of exercise you choose (for example, "Anxiety") is recorded for product analytics, but it is associated with a pseudonymous device identifier, not with you as an identifiable person.

We never transmit any information about your behaviour in the app - including the exercise categories you access - to RevenueCat (purchases) or to any other third party that does not need it.

Sentry breadcrumbs (the recent actions used to diagnose crashes) are filtered so that they do not contain references to exercise categories or to your emotional state.

Emotional Reset is not a medical device. It does not diagnose, treat, cure, or prevent any condition. If you are in a moment of crisis, please contact a healthcare professional or, in an emergency, dial the appropriate emergency number for your country. The app provides quick access to crisis resources in Settings.

10. Children's privacy

Emotional Reset is not intended for children. Under Romanian implementation of the GDPR (Law 190/2018), the minimum age for valid consent to information society services is 16 years. We do not knowingly collect data from anyone under 16. If you believe that a person under 16 has used the app and shared information with us, please contact support@emotionalreset.me and we will delete any associated data without delay.

11. How we protect your information

We use a combination of technical and organisational measures to protect your data:

• All data is transmitted over encrypted connections (TLS 1.2 or higher).
• Data stored at rest is encrypted (AES-256 or equivalent, depending on the provider).
• Access to production systems is restricted on a need-to-know basis and protected by two-factor authentication.
• Row Level Security (RLS) is enabled on our database, so that even at the database level, access to data is limited by policy.
• We log administrative access for audit purposes.

No system is perfectly secure, and we cannot guarantee absolute protection. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and, where required, we will inform affected users directly.

12. Cookies and tracking technologies

The Emotional Reset mobile app does not use cookies. It does not use third-party SDKs for advertising, attribution, or cross-app tracking. The app does not show advertising.

Our website at emotionalreset.me may use cookies. If it does, the website will display a cookie banner allowing you to accept or refuse non-essential cookies, in accordance with the ePrivacy Directive.

13. Complaints and supervisory authority

If you believe that we have not handled your personal data correctly, you have the right to lodge a complaint with the Romanian data protection authority:

You may also lodge a complaint with the supervisory authority in the EU country where you live or where the alleged infringement occurred. We would, however, appreciate the chance to address your concerns directly first - contact us at support@emotionalreset.me.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time, for example when we add new features, change providers, or when the law evolves.

When we make changes, we will update the "Last updated" date at the top of this document, and we will keep previous versions available on request. If the changes are significant, we will notify you in the app the next time you use it. Continuing to use Emotional Reset after a change means that you accept the updated policy.

15. How to contact us

If you have any question about this Privacy Notice or about how we handle your data, please contact us:

Version history

Version 1.0
1 June 2026 - Initial version, issued before the Friends & Family launch.